Lucene search
K

21 matches found

NVD
NVD
added 2025/12/09 4:17 p.m.3 views

CVE-2025-42877

SAP Web Dispatcher, Internet Communication Manager ICM, and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerability. This results in high impact on the availability with no impact on confidentiality or integrity of the application...

7.5CVSS0.00132EPSS
Exploits0References2
CVE
CVE
added 2025/12/09 2:14 a.m.7 views

CVE-2025-42877

CVE-2025-42877 affects SAP Web Dispatcher, SAP Internet Communication Manager (ICM), and SAP Content Server. The issue is described as a memory corruption vulnerability caused by logical errors, with unauthenticated access and impact limited to availability (CONFIDENTIALITY/INTEGRITY not affected...

7.5CVSS6.6AI score0.00132EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 2:14 a.m.2 views

CVE-2025-42877 Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server

SAP Web Dispatcher, Internet Communication Manager ICM, and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerability. This results in high impact on the availability with no impact on confidentiality or integrity of the application...

7.5CVSS6.6AI score0.00132EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-4181

Malware in sbrugna...

5CVSS6.4AI score0.00481EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-30277

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.0078EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.2 views

CVE-2023-26457

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

6.1CVSS5.8AI score0.0078EPSS
Exploits0References1
NVD
NVD
added 2024/08/13 4:15 a.m.14 views

CVE-2024-33005

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server ABAP and Java, and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a...

6.3CVSS0.00089EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/13 3:47 a.m.15 views

CVE-2024-33005 Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server ABAP and Java, and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a...

6.3CVSS6.8AI score0.00089EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/13 3:47 a.m.23 views

CVE-2024-33005 Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server ABAP and Java, and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a...

6.3CVSS0.00089EPSS
Exploits0References2
OSV
OSV
added 2023/03/14 5:15 a.m.1 views

CVE-2023-26457

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

6.1CVSS6.4AI score
Exploits0References2
Prion
Prion
added 2023/03/14 5:15 a.m.14 views

Cross site scripting

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

5.8CVSS5.9AI score0.0078EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/14 4:53 a.m.15 views

CVE-2023-26457 Cross-Site Scripting (XSS) vulnerability in SAP Content Server

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

6.1CVSS6.2AI score0.0078EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/03/14 4:53 a.m.7 views

CVE-2023-26457 Cross-Site Scripting (XSS) vulnerability in SAP Content Server

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

6.1CVSS6AI score0.0078EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/03/14 12:0 a.m.3 views

SAP Content Server 跨站脚本漏洞

SAP Content Server is a standalone component that can store any format and content. A cross-site scripting vulnerability exists in SAP Content Server version 7.53, which can be exploited by attackers to inject malicious JavaScript scripts...

6.1CVSS6AI score0.0078EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2022/08/18 12:0 a.m.1 views

VulnCheck KEV: CVE-2022-22536

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the...

10CVSS7.7AI score0.93833EPSS
Exploits8References1
GithubExploit
GithubExploit
added 2022/04/02 4:12 p.m.484 views

Exploit for HTTP Request Smuggling in Sap Content_Server

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-...

10CVSS10AI score0.93833EPSS
Exploits8
GithubExploit
GithubExploit
added 2022/02/15 9:22 a.m.1047 views

Exploit for HTTP Request Smuggling in Sap Content_Server

It is an offensive tool for SAP memory pipesMPI desynchronizat...

10CVSS9.3AI score0.93833EPSS
Exploits8
NVD
NVD
added 2015/06/02 2:59 p.m.11 views

CVE-2015-4157

SAP Content Server allows remote attackers to cause a denial of service service termination via unspecified vectors, aka SAP Security Note 2127995...

5CVSS6.7AI score0.00481EPSS
Exploits1References2
Prion
Prion
added 2015/06/02 2:59 p.m.14 views

Code injection

SAP Content Server allows remote attackers to cause a denial of service service termination via unspecified vectors, aka SAP Security Note 2127995...

5CVSS7.2AI score0.00481EPSS
Exploits1References2
Cvelist
Cvelist
added 2015/06/02 2:0 p.m.19 views

CVE-2015-4157

SAP Content Server allows remote attackers to cause a denial of service service termination via unspecified vectors, aka SAP Security Note 2127995...

6.7AI score0.00481EPSS
Exploits1References2
Rows per page
Query Builder